Re: [openstack-dev] [heat] [horizon] why is heat service-list limited to 'admin project?

2016-09-21 Thread Akihiro Motoki
Thanks. After I sent the mail, we had a good conversation with Rabi and understood the whole background. Horizon will try to support better keystone v3 support in Ocata cycle. 2016-09-21 22:47 GMT+09:00 Zane Bitter : > On 21/09/16 03:30, Akihiro Motoki wrote: > >> Hi, >> >>

Re: [openstack-dev] [heat] [horizon] why is heat service-list limited to 'admin project?

2016-09-21 Thread Zane Bitter
On 21/09/16 03:30, Akihiro Motoki wrote: Hi, The default policy.json provided by heat limits 'service-list' API to 'admin' project like below. Is there any reason 'admin' role user in non-'admin' project cannot see service-list? https://bugs.launchpad.net/keystone/+bug/968696

[openstack-dev] [heat] [horizon] why is heat service-list limited to 'admin project?

2016-09-21 Thread Akihiro Motoki
Hi, The default policy.json provided by heat limits 'service-list' API to 'admin' project like below. Is there any reason 'admin' role user in non-'admin' project cannot see service-list? "service:index": "rule:context_is_admin", "context_is_admin": "role:admin and is_admin_project:True",